RE: Group Policies Events 1030 & 1058

Hi,

Thanks for posting here.

For your description, I understand that you get 1030 and 1058 error in
application log in SBS 2003 SP1 server. If I am off base, please don't
hesitate to let me know.

For I don't know what actions have you done to resolve the issue, I suggest
that we follow my suggestions to try to troubleshooting the issue. I
appreciate your time and effort.

(1). Please restart the server. And try to test, how about the result?

(2). If the issue persists, please make sure the following things:

1. Network Binding Order

To correctly configure the network binding order, follow these steps:

A. Right-click My Network Places, and then click Properties.
B. On the Advanced menu, click Advanced Settings.
C. Under Connections, use the up and down arrow buttons to put the
connections in the following order:

Local Area Connection for the internal adapter
Local Area Connection for the external adapter
Remote Access Connections

2. DNS Configuration

Correct DNS configuration is important for the correct functioning of
Active Directory and programs on Small Business Server.

To verify correct DNS configuration, follow these steps:

A. Click Start, point to Programs, point to Administrative Tools, and then
click DNS.
B. Right-click the name of your server, and then click Properties.
C. Click the Forwarders tab, and then click Enable Forwarders. If the IP
addresses provided by your ISP are not listed here, add them by typing the
IP address, and then clicking Add.

3. TCP/IP settings

A. Right-click My Network Places, and then click Properties.
B. Right-click Local Area Connection for the internal network, and then
click Properties.
C. Click Internet Protocol (TCP/IP), and then click Properties. By default,
the internal IP address of the server is 192.168.16.2 with a Class C
subnet, 255.255.255.0. The Default Gateway for this connection must be
blank. The IP address for the Primary DNS server must be the internal IP
address of the server, 192.168.16.2, and the Alternate DNS server IP
address must be blank.

D. Right-click My Network Places, and then click Properties.
E. Right-click the Local Area Connection for your external adapter, and
then click Properties.
F. Click Internet Protocol (TCP/IP), and then click Properties.
G. Under DNS, click Use the following DNS server. The IP address for the
Primary DNS server must be the IP address of the server, 192.168.16.2, and
the Alternate DNS server IP address must be blank. Do not list your ISP''s
DNS servers here or obtain DNS server IP address automatically.

Restart the SBS server, does the issue still occur?

II. On the XP workstation go to User Accounts in Control Panel.

Advanced Tab
Manage Passwords
Remove All.
Logged out and back in.

Does the issue still occur?

III. Make sure the "Security Options ---> Digitally sign server
communication " settings match between SBS 2000 and SBS 2003:

IV. The issue may occur when the Distributed File System service is stopped
on the domain controller. To resolve this issue, make sure the Distributed
File System service is started, and set the Startup type to Automatic. To
do this, use the following steps:

1. Click "Start", point to "Programs", point to "Administrative Tools", and
then click "Services".
2. In "Services", double-click "Distributed File System".
3. On the "General" tab, click "Automatic" next to "Startup type".
4. Under "Service Status", click "Start" if the service is not started.
5. Click "OK", and then close the "Services" window.

V. Follow 816585 to apply Secure DC template (securedc.inf) to the server.
Next, run gpupdate.exe to force the policy refresh and restart server:

816585 HOW TO: Apply Predefined Security Templates in Windows Server 2003
http://support.microsoft.com/?id=816585

If this information doesn't resolve the issue, another workaround is to
disable SMB signing in the registry. Go to:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lanmanserver\Parameters

Set enablesecuritysignature to 0
Set requiresecuritysignature to 0.

If the issue still exists please provide me some information:

(1) Did your SBS 2003 upgrade from SBS 2000 or other OS?

(2). Please give me the error event application log.

(3) Please give me the registry key file to check:

1. Click Start -> Run, type regedit and click OK.

2. Locate the following keys:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\param
eters

3. Right click these keys and select Export, save the registry key.

4. Rename the exported file from .reg to .old and send to me.

Please add two files to a zip file and mail to v-yanniw@xxxxxxxxxxxxx

I appreciate you time and effort. I am currently standing by for you about
the test result. If you have any further concern or question about the
issue please don't hesitate to let me know. We are always happy be of
assistance of you!

Have a nice day!

Best Regards,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: Group Policies Events 1030 & 1058
>thread-index: AcWYxVkq751Z7C2kRhSAQrSvwwlXhQ==
>X-WBNR-Posting-Host: 212.54.222.41
>From: =?Utf-8?B?cFFp?= <pQi@xxxxxxxxxxxxxxxxxxxxxxxxx>
>Subject: Group Policies Events 1030 & 1058
>Date: Thu, 4 Aug 2005 00:23:02 -0700
>Lines: 16
>Message-ID: <63A22F6B-FE3E-474B-9B6D-2308901DA6AD@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:141388
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I am using SBS 2003 w/SP1. For some reason I am getting endless errors in
my
>application log regarding 1030/1058.
>
>When I try to modify group policies I receive the following message in a
>windows applet "You may not have appropriate rights" Details "Windows
cannot
>find the network path. Verify that the network path is correct and the
>destination computers is not busy or turned off.
>
>When I run DCGPOFIX it tends to resolve but only temporarily. It then goes
>back to path cannot be found again...???
>
>I am stumped by this...does anyone have any suggestions? I have went into
>EventID.net and tried using the resolutions posted, but still no go...
>
>Thanks in advance!
>
>

.

Loading